SchoolProtect - Editing Policy Groups
When a policy group is in 'edit mode', its contents are displayed and can be modified to suit requirements.
This allows you to:
-
Edit the properties of the policy group such as its name, description and priority. Please note: priority only applies to policy groups that target users rather than IPs. Even if present on an IP policy group, the priority does not have any effect.
- Edit existing filtering policies inside the group
- Create additional policies inside the group
- Create or amend the scheduling of policies
- Change the target of the group.
SchoolProtect functionality: How to target/activate a Policy Group in SchoolProtect
<span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span>
Settings Contained In A Policy Group
Properties
One or more filtering policies. These include the name of the policy group which you can change to anything you require. A number of special characters such as !"£$% can not exist in a group's name.
The priority setting should be a whole number between 0 and 999.
In user-based policy groups, the priority setting is used to define higher and lower priorities. This is needed in case a single user is in two or more groups. When such a user needs to receive the appropriate policy for them, they will get the policy that has the highest priority. The highest priority is defined by the smallest number, so that 0 is the highest priority in the system and all subsequent numbers take a lower priority.
E.g. A user is linked to three policy groups. The priority settings of the groups are 1, 2 and 5. When that user logs in, the policy they should be filtered by is the one with priority setting of 1 since that is the highest priority available to them. As a rule, higher priority policies tend to be less restrictive than lower priority ones.
Please note: that the priority only applies to user-based policies and applying this number to policies targeting IP addresses will have no effect. This box will be not editable when the policy group is linked to IPs.
Description is an optional field to help you remember what purpose each policy group is designed for.
Schedule
By default just one filtering policy will exist within a policy group. This will be the default policy which will have a default schedule of 24/7 attached to it. The default policy within any policy group should not be deleted but can be modified and renamed as needed. However, unlimited additional policies can be created. Each new policy will need a separate schedule created for it in order to take effect.
New filtering policies are created by pressing Clone on an existing policy within the group and then modifying its settings.
The default policy in a group will have a schedule which is set by default to 24/7. Each new filtering policy added to a group will need a separate schedule created for it in order to take effect.
Use the Add New Schedule button to define a schedule for a new policy. Once you have several policies and schedules, the View on Calendar button will show the various policy timings and relationship to each other.
Target users
Each policy group needs to have a target defined in order to become active.
A target can be:
- Any number of IP addresses
- Security groups from your Active Directory
- Groups of USO users
- Chromebook per-user filtering.
A policy group can only be linked to one type of target. For more details on targeting see below.
In this example, no target is set, so you can link the policy group to any of the four target types.